Deepmergefn Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Deepmergefn Project records in CISA KEV

No Deepmergefn Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2021-06109 CVE-2021-23417 · GHSA-vj72-mwrj-m2xq

MEDIUM 44

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01083 Published 2021-07-28 No fix listed CWE-1321